-
How do I make a Domo to Power BI Connection with Microsoft Authentication or Okta SSO and not ROPC?
Using the connector on the left requires an ROPC verification type which asks for the users Password. Our security requires that we work through a redirect with SSO and a token is passed back so passwords are only entered in one area. I believe the MSAL connector on the right should fill that criteria but it is still…
-
Domo Mobile App Access for App Studio in Subscriber Instances
We have a client who uses a subscriber instance and when we download the Domo App and try logging into the URL for the subscriber instance to access their Apps our SSO does not work. We get an error message: "Could not sign in - Mobile access has been restricted by your company. Please contact your MajorDomo for more…
-
Unable to Use SSO for Domo Mobile App in Intune MAM Environment
Domo Mobile App is not listed in "Microsoft Intune protected apps" and cannot perform Single-Sign-On with Microsoft Entra ID on mobile devices managed by Microsoft Intune MAM. Therefore, our employees are unable to use Domo Mobile App. We strongly hope that the Domo Mobile App will be supported by Intune MAM.
-
Can I turn over provisioning of new Domo users to my internal IT team to handle it all using Okta?
Hi all- I found these reference links: (appears that provisioning is *NOT* supported) (appears that provisioning *IS* supported) And this forum thread: But it doesn't seem 100% clear to me on whether new Domo user provisioning can be handled totally by Okta without manual steps in Domo for each new user added (outside of…
-
Enhancement to User List Attributes and Custom Attributes for Dynamic PDP
Hi, In a PDP policy you can now filter the data based on a trusted attribute. Now that trusted attributes can be lists it would be great if domo could perform an IN on the column instead of just always matching exactly. For example. We pass through a list of site ids that a user is allowed to see in the data. Ideally in…
-
Customer's Company email is changing what needs to be checked to ensure no issues after the change?
I have the steps to make the change using Bulk Import. But I want to see if there are other areas of Domo that will be affected that I need to check in association with this change to ensure no issues with the transition. Will SSO be affected?
-
Have you upgraded Domo SSO successfully (or unsuccessfully) to Azure AD?
We tried to upgrade Domo to Azure AD yesterday. There was an issue getting the AD groups to synch. I was wondering if anyone has been able to successfully get this to work. I’d also be interested in hearing if anyone attempted and it failed. If so, I’d be curious if you were able to figure out how to remove the AD groups…
-
Active Directory / SSO / User Provisioning and Deprovisioning
Hello Domo Product Team! One of our top ELA accounts has been struggling with the following for some time. We are hoping to gain enough attention (and enough upvotes) to have this considered for inclusion in the Domo platform. The general request is for automating user provisioning and deprovisioning via Active Directory…
-
Disable Directory Groups
When we set up SSO we imported all of our Active Directory groups. Well there are way too many of them making it hard to manage groups in general so I would like ot get rid of them. I unchecked the box in SSO that says import Directory groups and remove the passing of directory groups in their actual SSO setup. The groups…
-
SSO Sign-in Problem with Domo Mobile App for Android
We are using the Domo Mobile App and signing in using SSO (SAML). We are having the problem with the Android version, does anyone know of a solution? Phenomenon: Launch the App for Android -> Domo sign in screen -> SSO (IDP) -> Domo sign in screen -> (Loop) What we have tried: - Domo activity log shows successful SSO…
-
SAML Authentication in the Mobile App
I'm planning to do SSO with SAML, but I can't find a way to support SAML authentication in the Domo mobile app. I assume that the app probably doesn't support SSO, but has anyone else achieved this?
-
Okta Integration
Hello Team, Quick question. If I enable okta login for a user by adding user to okta group which has access to domo app... Can User be created in Domo even he or she has not even logged in once?
-
Okta Integration
Hello All, We are new to Domo. Need to setup Okta SSO.. Our security team asked us following... Can you guide me where I can get all this info... We will need the following information from application side for Okta SSO integration: 1.Single Sign-On URL 2.Audience Restriction(Entity ID) 3.Attributes statements i.e…
-
OpenID Connect does not work with Amazon Cognito
Hi, When trying to setup Amazon Cognito as the OpenID Connect provider I get an "invalid_scope" error returned from Cognito. This is created by the fact that Domo is requesting the following scopes on the request to Cognito: * scope=openid profile email phone address The address scope does not exist within Cognito and as…
-
Anyone know how the default Security Role is determined?
So I have Okta enabled. I create a user in Okta without them being in Domo and when they get pushed into Domo the default security role is PRIVILEGED. That also looks to be the default role when I create a new user manually in Domo. Any ideas on how to change that so Okta will bring them over as Participant or something…
-
If we turn on SSO, how is the "You've been Domo'd" notification impacted for new users?
We would like to turn on SSO in our environment. Currently when setting up user accounts, a "You've been Domo'd" email is automatically generated and sent to them. This email contains their user name and indicates that they will set up their password when connecting for the first time. But with SSO, they will not be…
-
Present Domo Login Page after Unsuccessful Authentication from IdP/SSO
The Domo Article "Understanding and Configuring Domo SSO using SAML" states that "If "Skip to identity provider" is selected, the DSO users will need to use the URL : https://<subdomain>.domo.com/auth/index?domoManualLogin=true in order to login with their DSO credentials" . However, if Mixed mode of Login is already…